Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: 1LDGvGmqfE6IYYUfQOag2dw1V/OEeWvSQRdNyEYZ9RI=
Subject key identifier: 69:60:98:DF:6D:00:65:7C:DD:14:82:BD:31:1D:53:07:DB:C9:03:C8
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 019D100ED36CE77B4A1CDA40DA90AEE20C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 187F
Signing time: Sat 21 Mar 2026 11:01:40 +0000
Manifest this update: Sat 21 Mar 2026 11:01:40 +0000
Manifest next update: Sun 22 Mar 2026 11:01:40 +0000
Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: ODH2w6CfMH25rX1WGimZ9qoPpecj0C5Qu69gOdFd7lw=)
2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:0e:d3:6c:e7:7b:4a:1c:da:40:da:90:ae:e2:0c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Mar 21 11:01:40 2026 GMT
Not After : Mar 22 11:01:40 2026 GMT
Subject: CN=696098df6d00657cdd1482bd311d5307dbc903c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:b0:67:01:9e:d2:de:0a:40:53:b0:93:a1:
1d:53:ca:0c:85:a3:fe:3c:c5:24:07:eb:d8:9e:6b:
ad:70:34:22:f8:3a:d8:6e:cb:8a:c9:7d:40:8e:d5:
46:88:ad:cd:25:6f:42:1f:a5:32:9c:40:f6:eb:76:
a7:2b:78:67:22:1c:05:38:bf:71:16:c4:d0:c1:7c:
ec:24:46:a3:3a:f1:9c:cc:df:74:98:7c:95:1f:4a:
2d:86:cb:8c:70:af:c4:d6:61:a4:43:ff:46:c8:24:
69:2b:b1:9d:fd:84:4e:d4:11:34:8b:50:23:af:cc:
c2:eb:47:f7:48:e6:6b:2c:5e:a7:93:21:a2:cf:3f:
8a:80:79:3d:c1:9b:e5:6e:be:8c:3f:32:fe:23:25:
9d:e4:b2:af:2a:5b:ec:17:4f:21:a0:f0:d9:99:36:
83:27:c9:e3:63:df:44:4f:87:09:22:d1:64:cb:46:
61:a5:fd:e7:10:75:75:c5:81:29:c0:e1:3b:15:45:
82:c7:c8:17:dc:b9:a2:e1:13:0d:c9:e8:57:03:36:
38:9b:41:c2:88:b8:45:8b:08:26:18:f6:cf:5f:21:
a2:67:37:da:41:88:8d:c6:85:18:74:84:ec:c8:3b:
2c:28:57:a1:73:d8:8e:c6:ac:0c:19:2a:49:d9:df:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:98:DF:6D:00:65:7C:DD:14:82:BD:31:1D:53:07:DB:C9:03:C8
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f5:24:87:bf:b8:d2:11:9b:2c:91:20:fa:a3:69:ee:71:48:
4e:f1:47:c3:4e:87:69:ce:e3:ec:4c:8b:c9:0e:b6:fa:9e:b6:
31:b5:1d:ca:3b:23:ce:6a:9e:83:29:30:ac:bb:46:6b:94:fa:
cd:97:b8:82:02:5c:f4:d8:92:94:97:e0:8c:4b:f7:e3:73:3d:
f2:57:bc:fb:39:3c:45:72:44:d6:8f:59:71:ce:22:01:4c:74:
4b:1d:e8:4c:7a:7f:30:a5:38:73:5a:3a:b2:10:28:70:a0:95:
01:af:49:38:11:a7:bd:30:95:b8:31:7f:ff:a5:ed:62:9a:bd:
3f:74:66:c3:7c:d1:59:b5:8a:bd:73:a2:f9:00:cb:53:ad:d0:
58:7c:69:3d:09:1c:33:ba:05:9b:93:1e:69:32:1b:23:19:9e:
c2:cb:40:66:e3:87:2a:ae:72:55:0a:02:72:65:fb:d5:80:0d:
ac:ed:9e:a0:dd:51:2b:a2:f7:13:67:4c:64:1b:bb:90:ab:a6:
e0:cc:a3:3a:02:11:c7:b0:9a:53:0d:0a:dc:9c:23:d1:3d:41:
fc:91:75:5a:12:f3:17:f7:6e:91:a7:12:4c:52:98:9c:12:8c:
bd:65:c8:d8:db:b1:63:66:48:c5:91:a2:71:12:e2:3f:ce:05:
ca:d6:36:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0QDtNs53tKHNpA2pCu4gwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0
ZGY4MDYwHhcNMjYwMzIxMTEwMTQwWhcNMjYwMzIyMTEwMTQwWjAzMTEwLwYDVQQD
Eyg2OTYwOThkZjZkMDA2NTdjZGQxNDgyYmQzMTFkNTMwN2RiYzkwM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykCwZwGe0t4KQFOwk6EdU8oMhaP+
PMUkB+vYnmutcDQi+DrYbsuKyX1AjtVGiK3NJW9CH6UynED263anK3hnIhwFOL9x
FsTQwXzsJEajOvGczN90mHyVH0othsuMcK/E1mGkQ/9GyCRpK7Gd/YRO1BE0i1Aj
r8zC60f3SOZrLF6nkyGizz+KgHk9wZvlbr6MPzL+IyWd5LKvKlvsF08hoPDZmTaD
J8njY99ET4cJItFky0Zhpf3nEHV1xYEpwOE7FUWCx8gX3Lmi4RMNyehXAzY4m0HC
iLhFiwgmGPbPXyGiZzfaQYiNxoUYdITsyDssKFehc9iOxqwMGSpJ2d8fKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlgmN9tAGV83RSCvTEdUwfbyQPIMB8GA1UdIwQY
MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt
OTVkOTVhY2U4MjgxLzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx
LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPUkh7+4
0hGbLJEg+qNp7nFITvFHw06Hac7j7EyLyQ62+p62MbUdyjsjzmqegykwrLtGa5T6
zZe4ggJc9NiSlJfgjEv343M98le8+zk8RXJE1o9Zcc4iAUx0Sx3oTHp/MKU4c1o6
shAocKCVAa9JOBGnvTCVuDF//6XtYpq9P3Rmw3zRWbWKvXOi+QDLU63QWHxpPQkc
M7oFm5MeaTIbIxmewstAZuOHKq5yVQoCcmX71YANrO2eoN1RK6L3E2dMZBu7kKum
4MyjOgIRx7CaUw0K3Jwj0T1B/JF1WhLzF/dukacSTFKYnBKMvWXI2NuxY2ZIxZGi
cRLiP84FytY2YA==
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:38:02 2026 by rpki-client